Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: vPEuFA1SlDjv/EJDCfDTMBzk8Icon0BWcqU3QKrj/EA=
Subject key identifier: 8A:7E:05:09:33:56:5D:C5:64:7D:BC:0C:F4:93:0A:E9:BB:9B:10:E7
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 01A08B30FC4A20B60B35E6155AADE464F79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 1A44
Signing time: Thu 10 Sep 2026 12:00:38 +0000
Manifest this update: Thu 10 Sep 2026 12:00:38 +0000
Manifest next update: Fri 11 Sep 2026 12:00:38 +0000
Files and hashes: 1: KqbQhkdZxzpCNnx1oWr4fisphrk.roa (hash: Wd6NpR+WA7JLVkZVqwEuj4FqkYVnQ8Ba2vJsRl6/8ck=)
2: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: chosbo4aiUak0HTMqe+e6M8uWFS65LBGNUZfnmd7BDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:30:fc:4a:20:b6:0b:35:e6:15:5a:ad:e4:64:f7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: Sep 10 12:00:38 2026 GMT
Not After : Sep 11 12:00:38 2026 GMT
Subject: CN=8a7e050933565dc5647dbc0cf4930ae9bb9b10e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:5d:37:7b:69:14:42:d9:4e:9b:87:d3:45:
a2:09:5e:b9:cc:bc:dc:14:9c:8f:89:55:3f:7e:e4:
4c:c9:d1:23:4c:ae:43:4e:33:3c:98:0e:a8:e5:66:
42:9b:62:07:fc:ac:6f:69:a2:a6:8d:c8:e2:58:f4:
95:8f:6e:2b:4d:75:88:09:8c:e0:c2:9a:b1:8d:0d:
91:16:6b:3b:87:18:0f:1b:ff:fc:e4:fa:b9:05:e7:
92:28:ae:a9:58:55:7d:0a:e3:09:46:49:c3:4e:d7:
b7:09:1b:0f:ae:33:ab:29:a7:80:45:f9:57:b3:88:
a0:3d:7a:11:71:9f:c3:de:be:18:5d:58:bf:5b:ca:
6b:41:43:c8:70:64:52:b0:07:08:e3:3b:45:c2:ea:
76:a5:1f:c7:f8:75:3d:9a:4d:d8:45:87:f9:49:33:
9f:34:15:c7:22:39:9e:9c:a5:cc:6e:1d:aa:66:99:
10:5a:67:16:b0:47:77:9b:7e:0d:1f:3d:c0:d5:c4:
56:91:91:08:50:76:5b:ac:26:61:60:9c:72:b6:60:
d9:ac:9c:4a:3b:3f:74:f3:89:31:70:7e:23:44:eb:
48:ec:fb:0c:62:53:dd:df:2b:fd:48:f5:b9:5f:5b:
77:58:d5:c3:46:1c:ef:14:94:4c:2a:5e:0f:8a:42:
ab:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7E:05:09:33:56:5D:C5:64:7D:BC:0C:F4:93:0A:E9:BB:9B:10:E7
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:83:d3:c8:23:c2:d2:34:7f:68:65:fa:1b:27:0a:2b:75:a1:
b1:33:2c:b4:f5:73:72:cf:03:cd:dd:89:8e:5c:a9:04:2a:b2:
f1:7b:01:f1:2f:6d:f0:ad:1a:63:1a:67:7b:a6:a0:d3:d0:cf:
5a:c0:c3:94:6d:1c:bb:91:f1:b0:0c:86:03:1e:5a:8d:f3:2a:
3b:9c:a9:f0:11:22:09:44:5c:82:24:77:06:8d:3c:6f:ff:79:
65:75:14:c3:7a:82:50:6c:a0:e4:98:94:d3:29:17:3d:1f:c7:
a0:49:d3:6f:b4:2e:cc:9b:21:64:3f:e9:45:9e:95:3c:e2:31:
06:1a:bf:24:41:6b:5d:2f:e2:35:7e:8d:2d:1f:d8:d7:6f:c0:
da:b9:cf:4b:41:f8:af:b3:42:58:c5:3d:89:83:46:31:bc:3b:
ab:ec:80:bf:7e:1d:59:ea:30:2e:f3:35:f0:50:f7:65:ea:33:
38:b1:d4:5a:2b:17:ac:98:f0:51:4a:28:c5:e2:e6:54:57:13:
2f:3c:81:14:68:cf:b1:b0:f1:9a:11:6f:0e:83:f3:95:74:70:
ea:1e:25:d0:eb:b0:27:a4:1b:8c:b3:f1:ea:27:0b:60:cb:cc:
65:7e:c0:f7:6a:08:36:c7:64:3f:26:ed:c0:c3:e0:42:79:00:
ee:e6:b8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:19:53 2026 by rpki-client